November 2013

399 CVEs published, −37% on October 2013 and −10% on November 2012. CISA added 0 to KEV.

2013, month by month. Point at another month to read it.

2013: CVEs published per month
Year	Jan	Feb	Mar	Apr	May	Jun	Jul	Aug	Sep	Oct	Nov	Dec	Year total
2013	January 2013: 443 CVEs	February 2013: 410 CVEs	March 2013: 446 CVEs	April 2013: 434 CVEs	May 2013: 358 CVEs	June 2013: 370 CVEs	July 2013: 500 CVEs	August 2013: 360 CVEs	September 2013: 475 CVEs	October 2013: 634 CVEs	November 2013: 399 CVEs	December 2013: 495 CVEs	5,324−1%

Critical: 5213% of the 394 with a CVSS score
Added to CISA KEV: 05 of this month's CVEs are in KEV, listed a median 3052 days after publication
Vendors: 152317 products
Top weakness: XSSCWE-79 · 63 CVEs

Who drove it

Vendors by distinct CVEs this month, with how many of those CVEs are now in CISA KEV and how far each moved in the ranking.

How this month's CVEs score on CVSS; 5 have no score yet. Severity is not exploitation.

Not in the top 100 in any of the 24 months before.

Weakness classes (CWE) by distinct CVEs, with how far each moved in the ranking.

The month's CVEs by the sector of the software they affect. A CVE that touches several sectors counts in each.

Area is CVEs this month. Point at a sector to read it.

The top weakness classes against the vendors and the sectors that carried them.

The lighter the cell, the more CVEs. Point at one to read it.

November 2013: weakness classes by vendor and by sector: By vendor
By vendor	79XSS	119Memory Buffer Bounds	264	20Improper Input Validation	200Information Exposure	22Path Traversal	352CSRF	189	399	94Code Injection
Cisco	2	9	6	12		2			2
IBM	12	2	6	3	2		1
Microsoft		10	1	2	5				1	1
Linux		9	2	2	2			4	2
Ffmpeg		12		3				4
Opensuse	1	3	3	1	2			1	1
Red Hat		3	2	2					1
Google	1	2	1		1			2	4
Canonical	1	3	2	2	1			1	2
Debian		1	2	1	1			1	1
Sap	2	1	2	2		1
HP	1						1